Re: FTP question

[Rob Berendt <rob@xxxxxxxxx>]

You want another back door?
Suppose you can't enter commands at the command line on a green screen.  
They try this, if you have Client Access loaded on your pc:
Start, Run 
rmtcmd dltlib mylib
or
rmtcmd pwrdwnsys *immed restart(*no)
 - but pwrdwnsys ships with *EXCLUDE, lucky for you, huh?

I can give you other examples if you want.

What I am saying is this, most users are smarter than what we give them 
credit for.  Why shouldn't IS be as smart as they?  If you are really 
concerned about security then evaluate exit points, or get a package that 
does exit points for you.  Trying to keep people ignorant is not a valid 
security strategy.





rjs@pgsas400.com on 02/29/2000 06:36:59 PM
Please respond to MIDRANGE-L@midrange.com@Internet
To:     MIDRANGE-L@midrange.com@Internet
cc:      
Fax to: 
Subject:        Re: FTP question

Whoa!

Doesn't this outline, step-by-step, how to "backdoor" an AS/400 from a PC? 
Perhaps a bit more
discretion and security awareness should be exercised before posting something 
like this?

JMHO

Regards,

Richard J. Serrano
Palace Guard Software
Within the U.S.   (800) 762-3696
Outside the U.S   (562) 435-3355
Fax                      (562) 435-0010
rjs@pgsas400.com
http://www.pgsas400.com

----- Original Message -----
From: Rob Berendt <rob@dekko.com>
To: <MIDRANGE-L@midrange.com>
Sent: Tuesday, February 29, 2000 7:40 AM
Subject: Re: FTP question


> As the other person asked, are you able to ftp manually?  I would test by 
>going to Start,
Programs, MS Dos command prompt and doing the following:
> ftp your400
> dir
> cd yourlib         if this is necessary then this might explain why
ftp://xxx.xx.xxx.xx/filetodownload doesn't work.
> dir
> get thefile
>
> If that fails write down the error you are getting.  You might have to debug 
>your exit point
program.  Simple enough using STRSRVJOB and stuff.
>
>
>
>
>
> Larryt222@aol.com on 02/28/2000 10:45:59 PM
> Please respond to MIDRANGE-L@midrange.com@Internet
> To: MIDRANGE-L@midrange.com@Internet
> cc:
> Fax to:
> Subject: FTP question
>
> I would like to allow my clients to download data from my AS/400 to their PCs
> via the net.  I want to be able to point them to a particular file on the IFS
> through their web browser.  (i.e. ftp://xxx.xx.xxx.xx/filetodownload)  My 400
> is online and I have written an FTP logon server program to allow "Anonymous"
> ftp and that works through a regular FTP session.  When I point to my browser
> to my system it shows me the subdirectory but I cannot initiate a download.
>
> Thanks
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---